No lab. No physical device. Just internet-facing OT systems and one curious mind.
This research started with a simple Fofa query and turned into the discovery of over 500 industrial OT devices exposed online — no login, no authentication. All found remotely, responsibly reported, and disclosed for public awareness.
It proves one thing: you don’t need access to hardware to uncover real-world OT risks — just the right mindset and the will to look deeper.